Dear User,
The privacy policy applies to services and products provided on dibz.se (collectively referred to as "the Services") by OptiQueue Nordics AB, company number 559286–3251, located at Grev Turegatan 75, 114 38, Stockholm, Sweden ("we" or "us"). The Services involve you providing us with personal data, which we then share with third parties of your choice. This means that these third parties will process the personal data as data controllers, in accordance with their current privacy policies.
Your privacy is important to us. Under the General Data Protection Regulation 2016/679 ("GDPR"), we are responsible for processing personal data when we determine the purposes and means of processing. "Personal data" means information that is directly or indirectly linked to a living individual, processed within the scope of the Services.
This document provides information about our collection, use, and processing of personal data, which parties we may share personal data with, and your rights regarding your personal data. When you use the Services, we will process personal data for multiple purposes, as outlined below.
PROCESSED PERSONAL DATA We collect and use the following types of personal data to provide the Services and for the purposes stated below: (a) Name; (b) Email address; (c) Phone number; (d) Billing address; (e) Personal identification number; (f) Password; (g) Username; (h) School; (i) Income; (j) Type of income; (k) Possible employer and employer contact information; (l) Possible membership in tenant/condominium associations and their contact information; (m) Current and desired housing type; and (n) Number of children in the household.
Please note that we cannot provide the Services or parts thereof without processing the above personal data. When using the Services, some information will be automatically collected by us, including: (a) Information about your use of the Services; (b) Information provided when contacting our customer service; (c) Content you post, upload, and/or contribute to the Services; and (d) Technical data, which may include the URL you visited before navigating to our Website, your IP address, unique device ID, network and computer performance, browser type, language, and operating system identification information.
PURPOSES OF PROCESSING AND LEGAL BASIS We will process the above information for the following purposes: (a) Name, email address, phone number, billing address, personal identification number, password, and username to administer your account, ensure the provision of the Services and integration with third-party services, and otherwise provide the Services in accordance with the user terms. The processing of personal data for this purpose is based on the necessity of fulfilling our contract with you; (b) The personal data in point a above, as well as income, type of income, information about potential employers and tenant associations, current and desired housing type, number of children in the household, and the number of queue days for each queue system to administer your registration to desired queue providers and regularly log in and update your information. Processing of personal data for this purpose is based on the necessity of fulfilling our contract with you; (c) Name and email address to send you notifications and messages via email, including marketing of our and related third parties' products and services, based on our legitimate interest in sending you marketing material about products and services that you may be interested in, and to inform you about our updates of the Services and user terms, based on our legitimate interest in keeping you updated about the development of the Services (such as new features) and the terms you have agreed to by using the Services; (d) Information about your use of the Services, information stated when contacting customer service, and content you post, upload, and/or contribute to the Services to personalize and improve your experience of the services, based on our legitimate interest in giving you a customized experience tailored to your preferences. (e) Information about your use of the Services and other technical data to ensure the technical functionality of the Services (to fulfill our contract with you) and to prevent the use of the Services in violation of the user terms, based on our legitimate interest in ensuring that our Services are not misused and to protect ourselves and our other users; (f) Information about your use of the Services to enforce the user terms, including protecting our rights, property, and safety, and if necessary, also third parties' rights, property, and safety, based on our legitimate interest in protecting our company, our Service users, and third parties; and (g) To fulfill obligations under law, based on our obligation to comply with applicable laws and regulations. For processing of personal data based on our legitimate interest, we have balanced the importance of our legitimate interest and the implications of personal data processing for your interests and your right to privacy, concluding that our legitimate interest can be exercised without infringing on your right to privacy that would prevent personal data processing.
STORAGE OF PERSONAL DATA As a general rule, we store your personal data only as long as necessary to provide the Services, unless there is a legal obligation to store the personal data for a longer period. After you have terminated your account, personal data linked to your account is stored for a maximum of 180 days. Contact details used for marketing and information dissemination are stored as long as your account is active, and deleted if you unsubscribe from our mailings, provided they are not needed to continue providing the Services to you. Personal data used to improve the Services and develop new services are anonymized as soon as possible, but not later than six months from the time they were created or obtained. Personal data used, where applicable, to enforce the user terms and/or protect our rights are stored for the duration of ongoing matters and deleted in accordance with applicable statute of limitations (three years in consumer relationships and ten years in other cases). Personal data processed under a legal obligation is stored for as long as the legal obligation specifies that the personal data should be stored. This includes when personal data is stored for accounting purposes, where the accounting information is stored during the current year and up to and including the seventh year after the end of the calendar year when the fiscal year ended.
TRANSFER OF PERSONAL DATA We will share and transfer your personal data to the queues you indicate. We will also share your personal data with our partners, suppliers, and related third parties for the above purposes. The housing queues covered by the Service require personal data in connection with registration. Therefore, we will share the personal data you have provided to us with these housing queues in accordance with the information they request. The housing queues we share personal data with use the data for housing search purposes. We also share your personal data with IT service providers and payment services within the EU/EEA, where you may have lower protection for your personal data. You can get more information about the transfer by contacting us at info@dibz.se.
COOKIES, BEACONS, AND OTHER TECHNOLOGY We collect information using technology such as cookies, pixels, beacons, and local storage (e.g., on your browser or device). For information on how we use technology and analysis tools and how you can prevent the use of cookies, please contact us at info@dibz.se.
LEGAL INJUNCTIONS AND PREVENTION OF HARM We may use, store, and share your information as a result of injunctions (such as search warrants, court orders, subpoenas, or similar), or when necessary to detect, prevent, and address fraud and other criminal activity, to protect ourselves, you, and other users, including as part of an investigation if we believe in good faith that it is required under applicable law. This may include responding to legal requests from jurisdictions outside the EU/EEA, where we believe in good faith that the response is required by the law in that jurisdiction, affects users in that jurisdiction, and is in accordance with internationally recognized standards. Information we obtain about you, including financial information, through the Website when you use the Services, may be used and stored for a longer period when the information is subject to legal request or obligation, governmental investigation, or investigations concerning possible violations of our user terms or policies, or otherwise to prevent harm.
LEGAL ORDERS AND PREVENTION OF HARM We may use, store, and share your information in response to legal orders (such as search warrants, court orders, subpoenas, or similar), or when necessary to detect, prevent, and address fraud and other criminal activity, to protect ourselves, you, and other users, including as part of an investigation if we believe in good faith that it is required by applicable law. This may include responding to legal requests from jurisdictions outside the EU/EEA, where we believe in good faith that the response is required by the law in that jurisdiction, concerns users in that jurisdiction, and is in accordance with internationally recognized standards. Information that we obtain about you, including financial information, through the Website when you use the Services, may be used and stored for an extended period when the information is subject to a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms of use or policies, or otherwise to prevent harm.
OTHER THINGS YOU NEED TO KNOW Links to other websites You should be aware that when you visit our Website, you may be directed to other websites operated by third parties where their collection of personal data is beyond our control. The privacy policy on their websites will govern the handling of the information collected from you. Change in ownership If the ownership of our business changes, we may transfer your information to the new owners so they can continue to provide the Services. The new owners will continue to observe the commitments we have made in this privacy policy. Notice of changes If we make changes to this privacy policy, we will notify you by posting a new policy on the Website. If the changes are significant, we will also send a separate notice to you or notify you in another appropriate way, and, if required by applicable law, we will ask for your consent. Your rights under EU legislation You can object to the processing of your personal data for direct marketing at any time. You can also withdraw your consent if you have given one. Withdrawal of your consent does not affect the legality of the processing before the consent was withdrawn, and we may continue to process your personal data based on other legal grounds, except for direct marketing. You have the right to request access to and further information about the processing of your personal data, or request that we correct, rectify, supplement, delete, or restrict the processing of your personal data. You have the right to receive a copy of the personal data that we process about you free of charge once (1) every calendar year. If you request additional copies, we may charge a reasonable fee based on administrative costs. If the processing is based on the legal grounds of legitimate or public interest, you have the right to object to the processing. If you do this, we will no longer be able to process the personal data unless we can demonstrate that our legitimate reasons for the processing outweigh your interests, rights, and freedoms – provided that the processing is not for the establishment, exercise, or defense of legal claims. If the processing is based on the legal grounds of consent or performance of a contract, you have the right to data portability. Data portability means that you can receive the personal data you have provided to us, in a structured, commonly used, and machine-readable format, and have the right to transfer such personal data to another data controller. To exercise the above rights or if you have questions about our processing, your rights under EU legislation, or if you wish your data to be removed, please contact us at the following address: info@dibz.se or OptiQueue Technologies AB, Grev Turegatan 75, 11 438, Stockholm. To ensure a prompt response, please include your full name in your message and, if applicable, your address, username, and the email address used at registration. Note that you should sign your message to receive information about the processing of your personal data. Please note that you may need to verify your identity before your request can be processed. If you have any complaints regarding our processing of your personal data, you can send a complaint to the relevant data protection supervisory authority. You can find more information about local data protection authorities by clicking the following link: [information about data protection authorities](https://ec.europa.eu/info/law/law-topic/data-protection_en).